tag:blogger.com,1999:blog-5766614972114406938.post1838217907129228482..comments2015-03-21T22:17:46.910+11:00Comments on Cracked, inSecure and Generally Broken: Benford's Law in "R"Craig Wrighthttps://plus.google.com/117910648569393591305noreply@blogger.comBlogger2125tag:blogger.com,1999:blog-5766614972114406938.post-66308193367427720422008-09-05T08:46:00.000+10:002008-09-05T08:46:00.000+10:00I have another post on this topic at http://gse-co...I have another post on this topic at http://gse-compliance.blogspot.com/2007/11/implementing-fraud-detection-using.html<BR/><BR/>Natural distributions are significantly differnt to those that people select. <BR/><BR/>In accounting this is used to find instances of fraud.<BR/><BR/>The same can also be applied to log files and other information in databases. This is particularly the case in the event that files are created rabdomly for instance. <BR/><BR/>The distribution of creation times can provide an indictation of systematic alteration. This methodology can also be used in traffic flow analysis.<BR/><BR/>I will add more in a separate post later.Craig S Wrighthttp://www.blogger.com/profile/08415993939211056384noreply@blogger.comtag:blogger.com,1999:blog-5766614972114406938.post-82182279611481661912008-09-05T01:47:00.000+10:002008-09-05T01:47:00.000+10:00Hi Criag,Please pardon the blunt question but does...Hi Criag,<BR/><BR/>Please pardon the blunt question but does this package have an IT Security application or is it purely for statistical geeks? <BR/><BR/>I've looked up Benford's law here http://mathworld.wolfram.com/BenfordsLaw.html and it seems to be about the distribution of the first digit in data sets? <BR/><BR/>So would you use this to profile the first octet of source ip addresses in your firewall logs and then look for variations to detect when you are being "hit" from an unusual source. Not much choice for first digits in IP addresses (0,1,2)so would it work for hex? Aren't IP addresses dimenionless? Think in need a bigger box to think inside :-)<BR/><BR/>Please put me out my misery. <BR/><BR/>Thanks<BR/><BR/>DaiAnonymousnoreply@blogger.com